Lucene search
GoogleOSV:CVE-2019-15607HistoryJan 28, 2020 - 3:15 a.m.
CVE-2019-15607
2020-01-2803:15:10
Google
osv.dev
3
A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc.
References
Related
hackerone
hackerone
Node.js third-party modules: [node-red] Stored XSS within Flow's - "Name" field
2019-08-26 09:17:03
osv
osv
Cross-Site Scripting in node-red
2020-01-30 21:00:21
cvelist
cvelist
CVE-2019-15607
2020-01-28 02:13:16
cve
cve
CVE-2019-15607
2020-01-28 03:15:10
nvd
nvd
CVE-2019-15607
2020-01-28 03:15:10
prion
prion
Cross site scripting
2020-01-28 03:15:00
github
github
Cross-Site Scripting in node-red
2020-01-30 21:00:21
veracode
veracode
Cross-Site Scripting (XSS)
2020-01-13 04:55:57